Enable 'Token' header in CROS